OpenShift-4-3部署安装（国内需要使用科学上网支持）

准备好本机访问科学上网环境

安装pip软件
1
$ yum install python2-pip

安装shadowsocks包

1	pip install shadowsocks -i https://pypi.douban.com/simple

编辑文件/etc/shadowsocks.json

$ cat > /etc/shadowsocks.json <<EOF
{
    "server":"shadowsocks的IP",
    "server_port":8388,
    "local_address": "0.0.0.0",
    "local_port":1080,
    "password":"fuuuuuuuuuuuuckgfw",
    "timeout":300,
    "method":"rc4-md5",
    "fast_open": false
}
EOF

启动shadowsocks客户端

1	$ sslocal -c /etc/shadowsocks.json -d start

如果需要暂停，执行以下命令

1	$ sudo sslocal -c /etc/shadowsocks.json -d stop

安装privoxy软件将sockets5转为http协议

$ yum install privoxy
$ cat >/etc/privoxy/config <<EOF
forward-socks5t   /               127.0.0.1:1080 .
listen-address  localhost:8118
EOF
$ systemctl start privoxy

设置本机的http代理服务

1
2
3

$ export http_proxy=http://localhost:8118
$ export https_proxy=http://localhost:8118
$ export no_proxy="registry.example.com,127.0.0.1,192.168.1.21"

其中no_proxy为本地镜像仓库，将会用来接收OpenShift 4的官方镜像。

同步镜像

镜像同步完成后的提示

[root@registry ~]# oc adm -a ${LOCAL_SECRET_JSON} release mirror      --from=quay.io/${PRODUCT_REPO}/${RELEASE_NAME}:${OCP_RELEASE}      --to=${LOCAL_REGISTRY}/${LOCAL_REPOSITORY}      --to-release-image=${LOCAL_REGISTRY}/${LOCAL_REPOSITORY}:${OCP_RELEASE}
info: Mirroring 109 images to registry.fcloudy.com:5000/ocp4/openshift4 ...
registry.fcloudy.com:5000/

......

info: Mirroring completed in 4m46.5s (3.265MB/s)
Success
Update image:  registry.fcloudy.com:5000/ocp4/openshift4:4.4.3-x86_64
Mirror prefix: registry.fcloudy.com:5000/ocp4/openshift4

To use the new mirrored repository to install, add the following section to the install-config.yaml:

imageContentSources:
- mirrors:
  - registry.fcloudy.com:5000/ocp4/openshift4
  source: quay.io/openshift-release-dev/ocp-release
- mirrors:
  - registry.fcloudy.com:5000/ocp4/openshift4
  source: quay.io/openshift-release-dev/ocp-v4.0-art-dev


To use the new mirrored repository for upgrades, use the following to create an ImageContentSourcePolicy:

apiVersion: operator.openshift.io/v1alpha1
kind: ImageContentSourcePolicy
metadata:
  name: example
spec:
  repositoryDigestMirrors:
  - mirrors:
    - registry.fcloudy.com:5000/ocp4/openshift4
    source: quay.io/openshift-release-dev/ocp-release
  - mirrors:
    - registry.fcloudy.com:5000/ocp4/openshift4
    source: quay.io/openshift-release-dev/ocp-v4.0-art-dev

检查本地镜像仓库状态

1	$ curl -u admin:admin -k https://registry.fcloudy.com:5000/v2/_catalog

下载相关的coreos文件

文件列表可参考 https://github.com/RedHatOfficial/ocp4-helpernode/blob/master/vars/main.yml
列表如下：

https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.4/latest/rhcos-4.4.3-x86_64-metal.x86_64.raw.gz
https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.4/latest/rhcos-4.4.3-x86_64-installer-kernel-x86_64
https://mirror.openshift.com/pub/openshift-v4/x86_64/dependencies/rhcos/4.4/latest/rhcos-4.4.3-x86_64-installer-initramfs.x86_64.img
https://mirror.openshift.com/pub/openshift-v4/clients/ocp/4.4.3/openshift-client-linux-4.4.3.tar.gz
https://mirror.openshift.com/pub/openshift-v4/clients/ocp/4.4.3/openshift-install-linux-4.4.3.tar.gz